At my lab, I have 2 NIC's working nicely. I added a new one (the 3rd) and it was not found by pfsense, but was listed after BIOS test, with IRQ assigned and all stuff. I guess it's and Realtek (dunno the model / version). Looking at dmesg, I can see: pci0: <network, ethernet=""> at device 10.0 (no driver attached)</network,> Am I supposed to give up (throw away)this NIC and use another one more trustable ?

Open a ticket with specific detailed information on what happens, and how to replicate it. Assign it to me, I'll check it out at some point this week when I have a chance.

Thank you

I'm going to suggest a picmg board. They have about the size of a double length isa card and can be got on ebay for a good deal. If you drop it into a backplane you can add as many nics as you want. http://cgi.ebay.com/PEAK-6320A-SBC-SINGLE-BOARD-COMPUTER-DUAL-P-3-CPU-CARD_W0QQitemZ300123906368QQihZ020QQcategoryZ1484QQrdZ1QQcmdZViewItem is a dual 370 on with on onboard nic. For a backplane you can get them in any size but, I would recommend something like this http://cgi.ebay.com/BackPlane-Boards-PICMG-PCI-4S-4-SLOTS-Passive-BP-NEW_W0QQitemZ270035587335QQihZ017QQcategoryZ11175QQrdZ1QQssPageNameZWD1VQQcmdZViewItem

It won't have any effect (at reasonable values, 100-2000 or so) unless you're using polling as it determines the polling rate. Polling use isn't recommended.

Should be.  How?  Heck if I know.  ;D

Yeah logging packets blocked by the default rule certainly shouldn't use ~20% CPU unless you're getting hammered by something that's getting blocked.

Debian testing/sid: e100: Intel(R) PRO/100 Network Driver, 3.5.17-k2-NAPI e100: Copyright 1999-2006 Intel Corporation ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 10 PCI: setting IRQ 10 as level-triggered ACPI: PCI Interrupt 0000:00:0d.0[A] -> Link [LNKB] -> GSI 10 (level, low) -> IRQ 10 e100: eth0: e100_probe: addr 0xdf100000, irq 10, MAC addr 00:03:47:AD:0A:D2 …. e100: eth1: e100_watchdog: link up, 100Mbps, full-duplex pfSense (Intel 82557, Realtek, Intel 82559[pro 100b/+]): $ dmesg Copyright 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 6.2-RELEASE-p5 #0: Sat Jun  2 12:29:20 EDT 2007     sullrich@builder6.pfsense.com:/usr/obj.pfSense/usr/src/sys/pfSense.6 Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel Celeron (634.78-MHz 686-class CPU)   Origin = "GenuineIntel"  Id = 0x686  Stepping = 6   Features=0x383fbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,mmx,fxsr,sse>real memory  = 133111808 (126 MB) avail memory = 120455168 (114 MB) wlan: mac acl policy registered kbd1 at kbdmux0 ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413) acpi0: <ibm cdtpwspt="">on motherboard acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xf808-0xf80b on acpi0 cpu0: <acpi cpu="">on acpi0 acpi_throttle0: <acpi cpu="" throttling="">on cpu0 pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0 pci0: <acpi pci="" bus="">on pcib0 agp0: <intel 82810e="" (i810e="" gmch)="" svga="" controller="">mem 0xf8000000-0xfbffffff,0xfe880000-0xfe8fffff irq 11 at device 1.0 on pci0 pcib1: <acpi pci-pci="" bridge="">at device 30.0 on pci0 pci1: <acpi pci="" bus="">on pcib1 fxp0: <intel 100="" 82557="" pro="" ethernet="">port 0x74a0-0x74bf mem 0xfe7ff000-0xfe7fffff,0xfea00000-0xfeafffff irq 15 at device 4.0 on pci1 miibus0: <mii bus="">on fxp0 nsphy0: <dp83840 10="" 100="" media="" interface="">on miibus0 nsphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp0: Ethernet address: 00:20:35:67:0d:31 rl0: <realtek 10="" 8139="" 100basetx="">port 0x7800-0x78ff mem 0xfe9fef00-0xfe9fefff irq 10 at device 5.0 on pci1 miibus1: <mii bus="">on rl0 rlphy0: <realtek internal="" media="" interface="">on miibus1 rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto rl0: Ethernet address: 00:0d:f3:05:08:d7 isab0: <pci-isa bridge="">at device 31.0 on pci0 isa0: <isa bus="">on isab0 atapci0: <intel ich="" udma66="" controller="">port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376 at device 31.1 on pci0 ata0: <ata 0="" channel="">on atapci0 ata1: <ata 1="" channel="">on atapci0 pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached) acpi_button0: <power button="">on acpi0 fdc0: <floppy drive="" controller="">port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 ppc0: <ecp parallel="" printer="" port="">port 0x378-0x37f,0x778-0x77f irq 7 drq 3 on acpi0 ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode ppc0: FIFO with 16/16/9 bytes threshold ppbus0: <parallel port="" bus="">on ppc0 lpt0: <printer>on ppbus0 lpt0: Interrupt-driven port ppi0: <parallel i="" o="">on ppbus0 atkbdc0: <keyboard controller="" (i8042)="">port 0x60,0x64 irq 1 on acpi0 atkbd0: <at keyboard="">irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A speaker0: <pc speaker="">port 0x61 on acpi0 pmtimer0 on isa0 orm0: <isa option="" roms="">at iomem 0xc0000-0xc7fff,0xc8000-0xcdfff on isa0 sc0: <system console="">at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 634775898 Hz quality 800 Timecounters tick every 1.000 msec Fast IPsec: Initialized Security Association Processing. ad0: 1007MB <wdc ac11000h="" 12.07h12="">at ata0-master WDMA2 acd0: CDROM <crd-8400b 1.12="">at ata0-slave PIO4 Trying to mount root from ufs:/dev/ad0s1a fxp0: link state changed to UP rl0: link state changed to UP fxp0: link state changed to DOWN rl0: link state changed to DOWN fxp0: link state changed to UP rl0: link state changed to UP pflog0: promiscuous mode enabled</crd-8400b></wdc></generic></system></isa></pc></at></keyboard></parallel></printer></parallel></ecp></floppy></power></serial></ata></ata></intel></isa></pci-isa></realtek></mii></realtek></dp83840></mii></intel></acpi></acpi></intel></acpi></acpi></acpi></acpi></ibm></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,mmx,fxsr,sse>

I am working to switch our CD boot loader to grub.  So far its been difficult so no promises, but I am atleast trying to do so.

unsupported method is to install the normal version to the CF and then change /etc/platform from 'pfSense' to 'embedded'. That will save your CF from repeated writes and also give you video. Don't install packages!

And, typically, while it works in the VM it turns out that the FX5620 isn't supported by FreeBSD's implementation of ACPI: ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)     ACPI-0159: *** Error: AcpiLoadTables: Could not get RSDP, AE_NO_ACPI_TABLES     ACPI-0213: *** Error: AcpiLoadTables: Could not load tables: AE_NO_ACPI_TABLES ACPI: table load failed: AE_NO_ACPI_TABLES Ah well, it was worth a go - I guess it'll just have to stay toasty :)

best solution is to disable everything (parallel port, serial port, sound card ,  usb) that you dont use.

yeaa, it got included in the pfsense kernel: http://cvstrac.pfsense.com/tktview?tn=1345

Unfortunately i cannot download the sample file from XML as given in the FAQ.

ok… i got the box and installation when through fine. all 4 marvell 88e8001 interfaces are up and running (latest snapshot). i'll be testing it in the next couple of days under load.

If the single port version is supported, you should have no problem with a multi-port card. I've used multi-port fxps and an old Compaq tl card.

for my internal LAN network I am looking at the D-LINK DGS-1248T 48 port GbE switch  $800 (CAD) and for my IP phones the D-LINK DES-1228P  10/100 POE switch  $449 (CAD) I don't have them yet, anyone tried them?

@youngadmin: I've done a bit more planning, and now realize that I may want to use pfsense to route and filter between 4 subnets….@ gigabit speed...or faster (using LACP)....while running Snort....and terminating an IPsec tunnel...and doing traffic shaping (esp for SIP)...while load balancing 2 or 3 WANs...and CARP. What will it take? This is more than I'd suggest running on any single box. I'd split it out into two machines (or two CARP clusters). One for routing and filtering between internal subnets for gigabit. You'll have to run Snort on a different machine most likely, you're not going to be able to route gigabit speeds and have Snort analyze at the same speeds on any hardware. Routing 4+ Gbps is going to require a new server class machine. Second, I'd put up another machine or CARP cluster at your perimeter, which could do Snort, load balancing, etc. Not sure how the shaper would work in a multi WAN environment, but I'm guessing not real well.